18. Sep. 2006 1 1:09 



BEST AVAILABLE COPY 

RgCEiVgD 

CENTRAL FAX CENTER 

SEP 1 8 2006 



No. 0100 P. 1/14 



3N THF. UNITED STATES PATENT AND TRADEMARK OFFICE 
In re Application of: nOLEV, Moshe 



Serial No. 



: 10/630,916 



Filed 



July 31 , 2003 



For 



METHOD AND ASSEMBLY TO PREVENT IMPACT- DRIVEN 
MANIPULATION OK CYLINDER LOCKS 

Group Art: Unit 3676 
Examiner; GALL, Lloyd A 

Tel Aviv, Israel 

September 14, 7006 



Hon. Commissioner of Patents and Trademarks 
Alexandria, VA 22313 



Sir; 



DECLARATION UNDER 37 CFR SEC 1.132 



I, the undersigned, Moshe Dolev, of Rehov Bereishit 17, RamaL 
Ilasharon, Israel 47201 hereby declare as follows: 

Background Information 

1. As the inventor, I am the owner and General Manager of 
Dolev Product. Development, Raanana, Israel, which I established in 
3 907. 

2. I have previously been employed by the following Israeli 
companies : 

a) El Al Israel Airlines - tool maker and aircraft- structure 
mechanic (12 years) 

b) * Founder and co-owner of Mul-T-Lock Ltd. (1973-1987), an 

international 1 y-recognized leader in door lock equipment; 

3. My educational qualifica Lions are summarized as: 

Israel Military Industries High School for training in 
toolmaking (1955-195 9) 

Mechanic's Course - Heavy Maintenance of Aircraft (1964) 
Business Management - Israel Management School (1979) 

4. I am Lhe inventor or co-inventor of approx. 30 published 
US patents and patent applications filed worldwide, dealing with 
locks and hair removers. 
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Overview Statements 

i>. The explanations contained in the following paragraphs 

address the uniqueness of the present invention over prior art 
solutions. The explanations do not replace the detailed background 
and technical details that were already provided in the patent 
application. These explanations are brought here to challenge the 
relevance of the Examiner's rejection statements, as stated in the 
Office Action (OA) dated March 23, 2006. 

6. The present invention discloses a method and assembly for 
preventing unauthorized manipulation of common cylinder locks, 
using the Bumpkey or Blowgun methods, or any other method that is 
based on the principles of the impact and momentum phenomenon. 

7. As stated in the Background section of the invention 
specification, the Bumpkey is a burglary tool, using an impact- 
driven blow for manipulation of cylinder locks. The technique was 
first developed in Denmark a quarter century ago, in the decade 
beginning with 1980 (see para. 12), based on an underlying theory 
of physics presented by Sir Isaac Newton over three centuries ago. 

8. Impact-driven manipulation of cylinder .locks, known also as 
the "Bumpkey" technique, is not known to many manufacturers of 
cylinder locks, and there has been limited activity in solving 
this problem. 

9. Impact-driven manipulation of cylinder locks is a now 
technique using an old phenomenon, the physics of impact momentum. 
The Examiner has cited only one patent dealing with the subject, 
Stcmmerick, issued in the US in January, 2004* 

10. I participated in an international fair devoted to lock 
technology, in March 2004, in Cologne, Germany, and also in July, 
2004 in Raltimore, Ml). At these fairs, I demonstrated a working 
model which I constructed, showing the Bumpkey technique. Those in 
attendance who witnessed the demonstration responded with both 
amazement and shock at the simplicity of the technique arid the 
danger it presents to lock security. 

11. I have researched the Internet for articles dealing with 
the. problem of the Bumpkey technique. Attached to this affidavit 
are five articles (each marked 1-5) which have been published on 
the internet, describing this technique. At a recent las Vegas 
conference entitled Defcon, "hackers" demonstrated the latest- 
techniques in security fraud, including the Bumpkey technique. 

12. In the article dated August 7 r 2005 {marked ss l") , a photo 
is shown of Mr. Marc Tobias, a lawyer and legal inves tigalor, 
demonstrating the Bumpkey technique. He stated in a security 
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seminar, in May 2006, that the Bumpkey technique is only around 
since approx, 1980 (see article marked "2"), 

13. The Bumpkey technique was demonstrated to the Examiner 
by my attorney, Mr. Edward Langer, in an interview conducted on 
March 8, 2005. Using this technique, Mr. Langer successfully 
opened a cylinder lock without using the lock key; instead, the 
Bumpkey technique was used. 

14. on October 31, 2005, I demonstrated the Bumpkey 
technique to the Examiner, for a second time, using a large-scale 
model of a cylinder, and I also presented him with a CD showing, 
in slow motion, the internal operation of the pin assembly during 
Bumpkey manipulation. 

My comments 

15. In the previous Office Actions of February 17, 2005, July 
18, 2005, and March 23, 2006, the Examiner has cited the Stemmerik 
patent for its teaching of a modified pin assembly which prevents 
"picking of the lock with an impact tool". 

16. It is important to note that the use of the terra "picking" 
in the above statement is misleading; if the intention is to 
indicate "opening of the lock with an impact tool", then the 
intention is understood. However, the term "picking" refers 
specifically to a technique related to the use of a back and forth 
jiggling motion on each pin, against the spring pressure, until 
the shear line is sensed. 

17. Although stated previously, in the Response to the Office 
Action filed May 17, 2005, it is worthy of repetition, that the 
Stemmerik reference contains an inaccurate description of the 
physical nature of the impact and its result. Stemmerik states at 
col- 1/ line 65: 

-the stroke towards the tumbler pin is transmitted to the driver 
pin which is thereby lifted without any actual movem ent of the 
tumbler pin . By the arrangement according to the invention, the 
effect of the impact is transmitted through the movable .member 
which constitutes one part of the driver pin". 

At col. 3, line 13 he states: 

"The member 11 in contact with the tumbler pin does not move " 

The reason these statements are incorrect is that the same 
physical forces which act on one pin act on the other, and cause 
them both to move. This was shown in the CD presented to the 
Examiner on October 31, 2005 {see above para. 14). 
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18. My invention specification correctly describes the 
response to the impact in relation to Figs. 18-19, from p. 12, 
line 4 though p. 13, line 25: 

(p 12, line 5) "immediately after the hammer 62 has struck the 
Bump key 60 ... both the tumbler pins and the driver pins (emphasis 
added) move from their locking positions 

19. Since the Stemmerik statement is incorrect, it cannot 
reveal the approach of the present invention. 

20. Further, Stemmerik contradicts himself in the description 
of the response to the impact energy, where he states at col. 3, 
line 28: 

"To increase the security against the member 11 moving in spite of 
the impact energy being transmitted to the movable member 10, the 
member 11 may have a closer tolerance (tighter fit) in the 
associated bore than that of the remaining driver pins. In this 
way a friction' between this driver pin and the bore is ensured." 

21 Thus, Stemmerik at first states that the member 11 does 

not move, and then he later states that friction with the bore is 
needed to ensure this. 

22. My invention does not rely on friction with the pins tc 



:o 

achieve its goal, whsreas Stemmerik does rely on this friction. 



23. Stemmerik does not disclose a "motion alteration means 
adapted so as to alter the magnitude of its response to an impact- 
driven blow applied to said tumbler pin..." 

24. For these reasons alone, Stemmerik is inappropriate as a 
reference teaching. 

25. The Examiner has cited the Steinbach or Bessim patents, 
each for its teaching of a modification of the strength of the 
biasing . springs in a pin tumbler lock to optimize its 
effectiveness against picking of the lock. 

26 The Steinbach patent describes a cylinder lock 

manipulation techniaue by which the spring pressure strength is 
sensed in relation to the pin tumbler length. Since shorter pin 
tumblers have a longer extended spring (less compressed), this 
pressure can be sensed and translated into the tumbler pin length 
for purposes of preparing an illegal key. The Steinbach solution 
is to provide a set of tumbler and driver pins of uniform combined 
length, to make it impossible to sense different spring strengths. 
In addition, to mislead an intruder, Steinbach suggests providing 
at least two springs of different strength, to give the "wrong" 
information. 
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27. Since the Steinbach patent was filed in 1978, he could not 
have related to the problem presented by the Bumpkey technique, 
which was not known prior to 1980. Therefore, the use by Steinbach 
of different spring strengths against the spring strength sensing 
technique cannot be a motivation to use this type of modification 
against an impact-driven manipulation, which was unknown at that 
time. Clearly, Steinbach does not suggest the use of different 
spring strengths as a way of interfering with impact-driven 
response, a response he could not have contemplated. Thus, 
Steinbach does not provide motivation for the impact case. 

28. The Bessim patent, filed in 1970, describes a lock having 
a master key and a secondary key, allowing two degrees of locking 
safety. As with Steinbach, the impact-driven manipulation 
technique was not known at that time, so that there is no basis 
for suggesting that Bessim provides motivation for an impact case. 

29. The Examiner has 'cited the Raskevicius and Surko patents, 
each for its teaching of a magnetic interlock between a driver and 
a tumbler pin to optimize its effectiveness against picking of the 
lock. 

30. The Raskevicius patent, filed in July 1978, describes a 
"picking" technique by which the normal manufacturing tolerances 
of a cylinder lock are exploited, so that the driver pins are 
manipulated so as to clear - the shear line while a rotational 
torque is maintained on the lock barrel portion. Another technique 
involves use of a key for jiggling the lock pins to give the same 
result. The solution proposed by Raskevicius is to provide a 
magnetic interlock between the driver and the key pin to prevent 
the driver pin from hanging up (getting stuck) on the shear line, 
and the key pin from dropping below the shear line, in certain 
lock-picking operations. 

31. Since the Raskevicius patent was filed in 1978, he could 
not have related to the problem presented by the Bumpkey 
technique, which was not known prior to 1980. Thus, the use by 
Raskevicius of a magnetic interlock is not a motivation to use 
this type of modification against an impact-driven manipulation. 
Raskevicius does not provide motivation for the impact case. 

32. The Surko patent, filed in 1976, describes a cylinder lock 
having a pin tumbler and driver releasably coupled together by 
mechanical means, when the cylinder lock is in a locked position. 
This type of cylinder lock is totally not susceptible to a Bumpkey 
technique. In addition, because it was filed in 1976, when the 
Bumpkey technique was not known, the use by Surko of magnetic 
means cannot provide any motivation to use this type of 
modification against an impact-driven manipulation. 
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33* Thus, it would not have been obvious to one of ordinary 

skill in the art to have modified the pin assemblies via the 
biasing springs, or magnetic properties, for the impact case, as 
the Examiner maintains. 

34. Therefore, prior art knowledge about biasing springs and 
magnetic properties, as applied to pin assembly modifications, 
does not make it "obvious to one of ordinary skill in the art" to 
modify the pin assemblies for the impact case. 

35. Therefore, it is absolutely impossible that one of 
ordinary skill in the art would conclude, using the cited 
references to Steinbach, Bessim, Raskevicius or Surko, that it is 
obvious to modify the pin assemblies as a way of interfering with 
impact-driven response. None of these patents provides motivation. 

36. In summary, the following conclusions may be drawn: 

- the Bumpkey method of lock manipulation is a serious problem; 

"picking" is a misleading term as related to an impact tool; 

Stemmerick contradicts himself in describing the pin assembly 

response to the impact energy of the manipulation method; 
~ my invention does not rely on friction , whereas Stemmerik 

does rely on this friction; 

Stemmerik does not alter the response of the pin to an 
impact-driven blow; 

Steinbach and Bessim do not relate to impact-driven response; 
Raskevicius or Surko do not relate to impact-driven response. 



37. This declaration is given in support of the patent 
prosecution efforts in the present application, before the USPTO. 

38. I declare that all the statements made herein of my own 
knowledge are true, and that all statements made on information 
and knowledge are believed to be true, and further that these 
statements are made with the knowledge that willful false 
statements and the like so made are punishable by fine or 
imprisonment, or both, under Sec. 1001 of Title 18 of the United 
States Code, and the willful false statements may jeopardize the 
validity of the application and any patent issuing thereon. 



Signed this 



lj day of s^-^fM ol 



/Moshe Dolev 
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Researcher: New passports vulnerable 

Defcon showcases latest discovered security weaknesses 
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LAS VEGAS, Nevada (AP) - 
Electronic passports being 
introduced in the United States 
and other countries have a major 
vulnerability that couid allow 
criminals to clone embedded 
secret code and enter countries 
illegalfy, an expert warned. 

A demonstration late Friday by German 
computer security expert Lukes Gam weld 
showed how personal Information stored 
on the documents could be copied and 
transferred to another device. 

It appeared to contradict assurances by 
officials in government and private industry 
that the electronic information stored in 
passports could not be duplicated. 

"If there is an automatic inspection system, 
I can use this card to enter any country " 
Grunwald said, holding up a computer chip 
containing electronic Information he had 
copied from his German passport. 

The research is the latest to raise concerns 
about the growing use of RFID, short for 
radio-frequency identification, which allows 
everyday objects such as store 
merchandise, livestock and security 
documents to beam electronic data to 
computers equipped with special antennas. 

Countries such as Germany already use 
RFID in passports to help border officials 
guard against forgeries and automate the 
processing of international visitors. U.S. 
officials plan to start embedding RFID in 
passports in October. 

A State Department spokeswoman said 
late Saturday she did not have enough 
information on the matter to comment 




Marc Tobias demonstrates a technique 
for secretly picking locks. 
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The presentation was one of dozens delivered at the Defcon conference being held 
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through Sunday in Las Vegas. The conference, attended by many of the world's best- 
known security experts, has become an annual showcase of the latest discovered 
weaknesses in computers, phone equipment and other machines. 

Routers faulted 

Another security professional showed how people can have their phone numbers 
hijacked when using certain types of equipment that route calls over the Internet 

The research, from Arias Hung, a security professional with Media Access Guard in 
Seattle, showed how to control the inner workings of Internet phone routers made by 
Unksys, which is owned by Cisco Systems Inc. 

Once the routers are accessed, a person can change the device's so-called media 
access control address, which acts as a serial number that Internet phone providers 
such as Vonage Holdings Corp. use to verify the Identity of customers. 

A person exploiting the flaw could intercept calls made to a legitimate Vonage user and 
make calls that would appear to come from the user's phone number. 

"The service providers should be very concerned." Hung said. "The general consumer 
should stay away from this router," he said, referring to two models that Unksys 
designates the WRTP64G and the RTP30O. 

Cisco spokeswoman Molly Ford said she could not immediately comment on Hung's 
research. 




Although Defcon focuses largely on computers, not all the research focused on 
circumventing high tech gizmos. 

Marc Tobias, a South Dakota lawyer who authored a textbook tor locksmiths, showed 
how a simple technique can allow a person to secretly pick the locks of most homes, 
businesses and post office mailboxes. 

The method, known as bumping, requires a person to file down a key and then gently 
tap it Into a lock. 

'You can do this with virtually every lock/ said Tobias, who is calling for a change to 
U.S. postal regulations to prohibit the trafficking of bump keys, which are advertised for 
sale on the Internet. 

Copyright 20O6 The Asso cia ted Press . AM rights reserved. This material may not be 
published, broadcast, rewritten, or redistributed. 
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SECURITY SEMINAR SERIES 

Title: Opening locks by bumping in five seconds or less: is it really a threat to physical 
security? 

Speaker: Marc Weber Tobias, Investigative Law Offices / O J 

Date: Tuesday, 23 May 2006, 14:15 \^ 
Place: Lecture Theatre 2, William Gates Building 

abstract: 

"here are millions of pin tumbler locks in the world that provide the primary security for the 
onsumer, business and government. The vast majority of these can be compromised in seconds 
/ith a minimal skin level and virtually no tools. The procedure is called 'bumping" and was first 
eveloped in Denmark a quarter century ago , although the underlying theory of physics was In feet 
■resented by Sir Isaac Wewton over three Osnturies ago. Marc Weber Tobias presents an 
^traduction to the technique of bumping and dstetailed analysis of its real security threat. 




Vesentation slides (Powerpoint, 8.2M) 



> 2006 University of Cambridge Computer Laboratory 

lease send any comments to Stephen Lewis 

'age last updated on 25-May-2006 at 1 7:05 by Stephen Lewis 
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If passports such as the 
one pictured here are 
phased out in favour of 
electronic idenfication, 
experts fear they could be 
hacked and used by 



Electronic passports vulnerable, 
expert says 

Updated Sun. Aug. 6 2006 7:45 PM ET 

Associated Press 

LAS VEGAS — Electronic passports 
being introduced in the United States 
and other countries have a major 
vulnerability that could allow 
criminals to clone embedded secret 
| code and enter countries illegally, an 
\ expert warned. 

j A demonstration late Friday by 
German computer security expert Lukas Grunwald showed how 
{ personal information stored on the documents could be copied 

! and transferred to another device. 

'. 

| It appeared to contradict assurances by officials in government 
! and private industry that the electronic information stored in 
j passports could not be duplicated. 

j "If there is an automatic inspection system, I can use this card 
j to enter any country/ GrunwaJd said, holding up a computer 
j chip containing electronic Information he had copied from his 
I German passport, 

j The research is the latest to raise concerns about the growing 
i use of RFID, short for radio-frequency identification, which 
j allows everyday objects such as store merchandise, livestock 
j and security documents to beam electronic data to computers 
] equipped with special antennae. 

i 

1 Countries such as Germany already use RFID in passports to 
{ help border officials guard against forgeries and automate the 
! processing of international visitors. U.S. officials plan to start 
I embedding RFID in passports in October. 

! 

j The presentation was one of dozens delivered at the Defcon 
| conference being held through Sunday in Las Vegas. The 
I conference, attended by many of the world's best-known 
| security experts, has become an annual showcase of the latest 
j discovered weaknesses in computers, phone equipment and 
! other machines. 
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, Another security professional showed how people can have their 
; phone numbers hijacked when using certain types of equipment 
i that route calls over the Internet. 

: The research, from Arias Hung, a security professional with 
i Media Access Guard in Seattle, showed how to control the inner 
; workings of Internet phone routers made by Linksys, which Is 
; owned by Cisco Systems Inc. of San Jose, Calif. 

i Once the routers are accessed, a person can change the 

| device's so-called media access control address, which acts as a 

: serial number that Internet phone providers such as Vonage 

i Holdings Corp. use to verify the identity of customers. A person ! 

: exploiting the flaw could intercept calls made to a legitimate 

j Vonage user and make calls that would appear to come from 

j the user's phone number. j 

i L { 

j 'The service providers should be very concerned," Hung said. 

| "The general consumer should stay away from this router," he 

j said, referring to two models Linksys designates the WRTP54G I 
! and the RTP300. 

j i 

, Cisco spokeswoman Molly Ford said she could not immediately 1 

j comment on Hung's research. \ 

j Although Defcon focuses largely on computers, not all the 
\\ research focused on circumventing high-tech gizmos. 

I Marc Tobias, a South Dakota lawyer who authored a textbook 
j for locksmiths, showed how a simple technique can allow a 
j person to secretly pick the Jocks of most homes, businesses and 
i post office mailboxes, 

i 

j The method, known as bumping, requires a person to file down 
j a key and then gently tap It Into a lock. 

j "You can do this with virtually every lock," said Tobias, who is 
j calling for a change to U.S. postal regulations to prohibit the 
i trafficking of bump keys, which are advertised for sale on the 
! Internet. 



No. 0100 



i- 



USER TOOLS 



1 Print This Page 



\ O E-Mail Story 
\ EOl Feedback 



; SCITECH STORIES 

► Electronic passports vulnerable, 
expert says 

► Your boss can now track you on your 
cell phone 

\ Indonesia rebels cash in on risky 
logging binge 

► 10 years later, few believe in life on 
Mars 

► Your cell phone could be home to 
nasty bacteria 

► Canadian astronaut eager to fly in 
Shuttle 

► X-ray beam reveals ancient 
Archimedes' writings 

► Ship hits pier, spilling oil north of 
Vancouver 

► Philippines officials warn volcano 
may erupt 



i i 



P. 11/14 
Page 2 of 3 



http://www.ctv.ca/servlet/ArticleNews/story/CTW passport 060806/.. 

PAGE 11/14 * RCVDAT 9/18/2006 5:10:10 AM [Eastern Daylight Time] ■ SVR:USPT0^FXRF-3/1 1 DNIS:2738300 * CSID: " DURATION (mm-ss):05-16 



07/08/06 



18. Sep. 2006 1 1:1 3 



No. 0100 P. 12/14 



Chevron is one of the companies mentioned. Chevron's corp network was 
compromised to out lar ge amounts of spam. Indeed, why would you bother with 
pesky home desktops, if you can compromise a large corp network hooked up to a Tl . 

Posted in DefCon | No Comments » 

DefCon Chronicles; why DefCon is unique 

Sunday, August 6th, 2006 

DefCon is probably the only conference where 

i 

I- the organizers keep reporting on dealing with hotel management, and whether or not the 
conference wHl be kicked out (fyi, Riviera is quite happy with DefCon attendees so fer) 

2. the early 10 am speaker brings helpings of beer to his talk just to help people who are 
hungover 
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DefCon C hronicles: open anv lock under 5 seconds 

Samrday, August 5th, 2006 





Marc Weber Tobias and Matt Fiddler are talking about bump^pening most of the 
locks out there in the United States. The foil paper is availavle at security, org . They 
also conducted a research with USPS and Mailboxes, etc. While USPS quickly 
worked with the researchers and agreed that the issue was there, MailBoxes etc 
keeps denying there's a problem. A PDF with detailed technical analysis is also 
available . The presentation promised: 

Case examples and demonstrations detailing a major security flaw and vulnerability 
m kxks used by the federal government and a private sector corporation that alTcct 
millions of users will be presented. 

and it certainly delivered that. Live in an apartment complex? you can make a bump 
key out of your key that will open any apartment. Rent a mail box? Gain access to 
anything that uses the same type of key. And if you're bothered too much with 
creating your own bump keys, just buy some off eBav , 
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Lock picking child's play 
at hackers conference 



Agence France-Presse 

Last updated 09:46am (Mia time) 08/07/2006 

LAS VEGAS — Locks commonly used at homes and 
businesses worldwide were ao easy to pick that 
children could do it, computer hackers practicing the 
skill were shown on Sunday. 

In a Las Vegas casino meeting room devoted to the art 
of lock picking for the course of a three-day DefCon 
hackers conference, Marc Tobias and Matt Fiddler 
demonstrated that all It took to open a lock was a tap 
and a twist 

Emphatic proof arrived in the form of an 11-year-ofd 
girl, who deftly opened typical door locks under the 
watchful eyes of her mother within minutes of being 
tfven a "bump key" and a brief lesson in how to use it 

That was absolutely my coup," said Tobias, a lawyer 
and a security consultant that authored Locks, Safes 
and Security. Tm putting her picture on my website, 
along with a video of her doing It" 

The type of bump key used by the girl was developed in 
Denmark long ago and basically was an easily modified 
key blank, Tobias explained. 
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Putting bump keys in typical pin tumbler locks and giving them a whack sent Shockwaves that Jarre 
position for opening, Tobias showed Agence France-Presse. 

"My old friend Isaac Newton 350 years ago figured out bumping," Tobias said, iikenrng it to the princ 
action having an equal and opposite reaction. "It is just that there were no locks with pins in them." 

"It's a very simple premise." 

Tobias began calling attention to the vulnerability in the United States about two years ago after col 
same in The Netherlands. y 1 

The technique could be used to open almost any lock, from weighty ones used by urban merchants 
down gates to home door locks and those on the approximately five miifion US post office boxes, T< 
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„ Agence France-Presse. 

Pedicab man 

returns bag 

with PIO^QOO "These locks are all over the world/' Tobias said. There Isn't a lock in France I cant open." 
More Sites: State of 

Emergency, Layte Landslide, A few companies such a$ EWA of Austria make far more secure locks based on sliders or magnets 
ULTRA Stampede, The ' P 1 ^*. according to RdcBer and Tobias, who opted for those kinds of locks on their homes. 
Paoquiao Files, Edsa 20 

'The problem Is that the public doesnt get it" Fiddler said. "They dont know, and the lock manufact 
want to tell them." 

Tobias, a lawyer who began picking locks for fun at the age of 15, joked that all he wanted was for p 
packaging to bear warnings that the devices could be opened by people with little skill using basic t< 

"It is inherent in the pin tumbler lock," Tobias sard. "If you have real security needs, buy better locks 

Lock picking held an afiure for computer hackers, more than 6,000 of which turned out for the 14th t 
conference that ended on Sunday in Las Vegas, according to organizers. 

They were curious about how things worked, and then took pride in figuring out how to crack codes 
software barrier*, attendees conceded. 

Hackers crammed the room each day to hone Jock-picking skills or compete for the title of top lock-f 

"I was completely dumbfounded that this was possible," DefCon attendee Tom Lappas told Agence 
as he practiced bumping a lock. "I thought you needed a sledge hammer and chain saw to do this." 

The existence of a room full of people doing this is astounding.* 

It was vital to know what security could be breached, whether it was a door lock or a computer prog 
build better defenses, said the 24-year-ofd California university student 

The US Postal Service was taking action to make post office boxes more secure, and efforts were u 
address the bump key vulnerability in Europe, according to Tobias and Fiddler. 

They are dealing with ft In Europe," Tobias said. The problem is there are a billion lock3 out there/ 
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